Cashless parking app in Bournemouth withdrawn due to security issues

A CASHLESS parking app, which was used by motorists in Bournemouth car parks, has been disabled because of IT security issues.

The Phone and Pay service, which allowed people to book spaces using their smart phone, was withdrawn from Apple’s App store after Bournemouth-based app developer Matt Cheetham claimed it was a ‘security nightmare’. Bemrose Mobile, the firm behind the app, and Bournemouth council say there has been no security breach and no credit card details have been compromised.

However, Bournemouth council has said it is undertaking an ‘urgent investigation’ and will consider whether the matter should be referred to the Information Commissioner’s Office.

Share article

Matt, 22, started investigating the app after experiencing problems trying to use it. “I quickly realised there wasn’t any security on their server,” he said. “All you had to do was go on a website, type in your mobile number and you could retrieve information.”

Gary Powell, head of traffic management at Bournemouth council, said, “We have received assurances that the app was disabled as soon as issues arose and there was no security breach.”

Promoted Stories

Comments (7)

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.B.F.G

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

Score: -10

PokesdownMark says...1:39pm Tue 4 Mar 14

Very much a story for two reasons: 1 the council failed to properly perform due diligence on the app. Even the non-security features had issues. If you bought a months pass for one car park, lets say for work, you were unable to start any other for parking in another car park for parking at the weekend. In short the council put significant financial risk and a degree of personal safety risk on their customers because of their lack of effort. Just to save a few pennies. Sadly many other councils did the same. 2 it is nonsense to say there has been no data breach. The method was very simple to exploit. The people who may have been taking advantage are not going to put their hands up and say so!

Very much a story for two reasons:
1 the council failed to properly perform due diligence on the app. Even the non-security features had issues. If you bought a months pass for one car park, lets say for work, you were unable to start any other for parking in another car park for parking at the weekend. In short the council put significant financial risk and a degree of personal safety risk on their customers because of their lack of effort. Just to save a few pennies. Sadly many other councils did the same.
2 it is nonsense to say there has been no data breach. The method was very simple to exploit. The people who may have been taking advantage are not going to put their hands up and say so!PokesdownMark

Very much a story for two reasons: 1 the council failed to properly perform due diligence on the app. Even the non-security features had issues. If you bought a months pass for one car park, lets say for work, you were unable to start any other for parking in another car park for parking at the weekend. In short the council put significant financial risk and a degree of personal safety risk on their customers because of their lack of effort. Just to save a few pennies. Sadly many other councils did the same. 2 it is nonsense to say there has been no data breach. The method was very simple to exploit. The people who may have been taking advantage are not going to put their hands up and say so!

Score: 12

jpm2067 says...1:58pm Tue 4 Mar 14

Oh come one Echo - this feels like half the story - why don't you help your readers understand what is actually happening now? I still have access to the app and it seems to be working. Are we to stop using the app? Your article suggests that it was withdrawn from the app store on Apple - but its still there on Android from their website. You also report that the council said the app was disabled as soon as the issue arose. So where have you helped the reader here about covering the story and included advice if they have got it or used it? I may have missed this or maybe thought you would help your readers, but to me you have written a story that doesn't give people reassurance and confirmation of what has happened or is planned to fix it.

Oh come one Echo - this feels like half the story - why don't you help your readers understand what is actually happening now?
I still have access to the app and it seems to be working. Are we to stop using the app? Your article suggests that it was withdrawn from the app store on Apple - but its still there on Android from their website. You also report that the council said the app was disabled as soon as the issue arose.
So where have you helped the reader here about covering the story and included advice if they have got it or used it? I may have missed this or maybe thought you would help your readers, but to me you have written a story that doesn't give people reassurance and confirmation of what has happened or is planned to fix it.jpm2067

Oh come one Echo - this feels like half the story - why don't you help your readers understand what is actually happening now? I still have access to the app and it seems to be working. Are we to stop using the app? Your article suggests that it was withdrawn from the app store on Apple - but its still there on Android from their website. You also report that the council said the app was disabled as soon as the issue arose. So where have you helped the reader here about covering the story and included advice if they have got it or used it? I may have missed this or maybe thought you would help your readers, but to me you have written a story that doesn't give people reassurance and confirmation of what has happened or is planned to fix it.

Score: 4

Phixer says...4:17pm Tue 4 Mar 14

B.F.G wrote…

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

It is an issue when non-commercial minded public serpents try to be smart and make a pig's ear of it. It's not only your money and my money being spent on this app, it's yet another public serpent slack approach to security.

[quote][p][bold]B.F.G[/bold] wrote:
This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.[/p][/quote]It is an issue when non-commercial minded public serpents try to be smart and make a pig's ear of it. It's not only your money and my money being spent on this app, it's yet another public serpent slack approach to security.Phixer

B.F.G wrote…

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

It is an issue when non-commercial minded public serpents try to be smart and make a pig's ear of it. It's not only your money and my money being spent on this app, it's yet another public serpent slack approach to security.

Score: 2

Jimeneyp says...4:50pm Tue 4 Mar 14

B.F.G wrote…

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

The app isn't working still, you get to the point where you enter the location code and it won't progress any further. If the council had stuck with RingGo then there wouldn't be any issues at all. If it's not broken then don't fix it!!!!

[quote][p][bold]B.F.G[/bold] wrote:
This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.[/p][/quote]The app isn't working still, you get to the point where you enter the location code and it won't progress any further.
If the council had stuck with RingGo then there wouldn't be any issues at all. If it's not broken then don't fix it!!!!Jimeneyp

B.F.G wrote…

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.

The app isn't working still, you get to the point where you enter the location code and it won't progress any further. If the council had stuck with RingGo then there wouldn't be any issues at all. If it's not broken then don't fix it!!!!

Score: 10

Jetwasher says...6:41am Wed 5 Mar 14

You must be mad if you think you could trust the council with your credit card details to pay for parking….

You must be mad if you think you could trust the council with your credit card details to pay for parking….Jetwasher

You must be mad if you think you could trust the council with your credit card details to pay for parking….

Score: 3

kevinmitnick says...5:12pm Wed 5 Mar 14

Clearly Matt is a hacker and should be arrested and investigated.

Clearly Matt is a hacker and should be arrested and investigated.kevinmitnick

Ipsoregulated

This website and associated newspapers adhere to the Independent Press Standardards Organisations's Editors' Code of Practice. If you have a compaint about editorial content which relates to inaccuracy or intrusion, then please contact the editor here. If you are dissatisfied with the response provided you can contact IPSO here